Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402343.roa
File: AS402343.roa (raw, json)
Hash identifier: RCy/qUc0nelaLAFedWCWz+4p6noGdysC2/SysSN8UW4=
Subject key identifier: D5:F3:AB:A2:F4:BB:FD:99:09:D4:53:D3:99:C1:47:3D:1E:90:CD:CA
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 40492D34C3E5A5686D5A3E76DE94625CA8D4A7AE
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402343.roa
Signing time: Fri 19 Jun 2026 03:19:43 +0000
ROA not before: Fri 19 Jun 2026 03:14:43 +0000
ROA not after: Fri 18 Jun 2027 03:19:43 +0000
asID: 402343
IP address blocks: 51.241.110.0/24 maxlen: 24
188.221.110.0/24 maxlen: 24
188.221.152.0/24 maxlen: 24
188.221.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:49:2d:34:c3:e5:a5:68:6d:5a:3e:76:de:94:62:5c:a8:d4:a7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 19 03:14:43 2026 GMT
Not After : Jun 18 03:19:43 2027 GMT
Subject: CN=D5F3ABA2F4BBFD9909D453D399C1473D1E90CDCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:37:c4:ca:dd:8c:42:a9:e0:b6:73:c9:05:
07:ef:a5:6e:1a:f1:bd:29:00:b3:b9:b9:af:31:ba:
90:e3:84:2f:0c:fd:91:06:e0:43:fe:2e:08:1b:45:
57:20:71:a9:f4:3b:c0:91:7f:95:b7:ba:c9:f5:25:
02:b2:a9:2a:9a:08:77:76:24:83:81:fc:d5:67:52:
0a:73:ff:73:1c:68:1c:b8:e1:e6:d2:31:64:ff:e3:
f3:7f:a7:82:93:65:41:e7:9f:b9:0b:86:78:02:e3:
d4:b4:38:7f:3e:71:87:93:f3:97:a0:83:55:b5:94:
a8:79:fe:21:ee:3c:80:d3:04:ca:36:5e:70:a5:45:
14:e8:00:30:c7:e7:2c:a1:c9:f3:0a:6e:2a:d1:df:
e1:20:25:9c:5e:4d:15:f2:1e:00:35:ce:c1:21:b3:
0a:9d:56:2c:74:54:da:30:34:2d:9d:29:9a:f7:a0:
0c:86:8b:79:5e:87:a3:76:e1:9a:25:f1:b6:2d:b4:
9e:fe:77:76:46:de:34:24:3a:b3:b5:2a:6d:b6:77:
0e:d6:24:cc:b6:bf:3f:5b:88:19:e9:a6:10:0c:45:
84:ae:d6:0e:5e:50:d7:75:1d:59:31:e1:6d:f7:42:
51:2d:bd:ca:2d:8d:1f:57:74:ed:c0:13:99:2d:b0:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F3:AB:A2:F4:BB:FD:99:09:D4:53:D3:99:C1:47:3D:1E:90:CD:CA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402343.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.110.0/24
188.221.110.0/24
188.221.152.0/24
188.221.253.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ff:27:79:ad:59:bf:88:35:6b:69:d6:39:bc:76:25:df:b7:
d6:b3:29:9a:72:c0:40:a6:9a:5f:02:2c:74:3d:be:34:eb:27:
e8:ce:e5:ea:66:b6:0d:6a:0b:89:3a:66:4d:42:f0:df:bd:75:
e8:48:3a:08:6b:a9:f9:21:6e:13:4a:82:2b:23:f3:4f:7f:13:
4d:05:b3:23:31:57:99:73:e9:51:f0:4d:e6:ae:68:82:55:74:
97:dd:a7:ec:40:5d:a7:c9:00:f5:11:02:50:4a:92:0d:58:c4:
93:8a:59:15:69:ac:65:5a:41:58:47:37:0c:c1:32:c2:11:29:
8e:de:2a:ee:cb:75:68:85:cf:27:23:01:e6:58:51:67:05:bc:
d9:b5:7d:6d:b2:87:15:86:a3:96:79:df:90:40:8a:71:0a:1b:
7c:a7:c7:78:a5:3d:aa:d8:9a:29:41:fd:62:2c:c5:4c:8d:57:
67:8f:90:a2:b5:fd:8f:db:ae:b2:d9:70:86:a9:04:14:93:21:
1a:10:37:92:7d:9b:36:5d:e8:af:47:4f:4d:20:a9:70:1a:0e:
91:3e:24:9d:51:ea:d9:f8:e9:64:ef:9b:00:fc:1d:35:a2:9d:
f5:57:52:03:e0:7c:c6:cb:04:5f:24:75:24:8a:91:3d:94:6e:
d1:ff:b5:90
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUQEktNMPlpWhtWj523pRiXKjUp64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MTkwMzE0NDNaFw0yNzA2MTgwMzE5NDNaMDMxMTAvBgNV
BAMTKEQ1RjNBQkEyRjRCQkZEOTkwOUQ0NTNEMzk5QzE0NzNEMUU5MENEQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjuzfEyt2MQqngtnPJBQfvpW4a
8b0pALO5ua8xupDjhC8M/ZEG4EP+LggbRVcgcan0O8CRf5W3usn1JQKyqSqaCHd2
JIOB/NVnUgpz/3McaBy44ebSMWT/4/N/p4KTZUHnn7kLhngC49S0OH8+cYeT85eg
g1W1lKh5/iHuPIDTBMo2XnClRRToADDH5yyhyfMKbirR3+EgJZxeTRXyHgA1zsEh
swqdVix0VNowNC2dKZr3oAyGi3leh6N24Zol8bYttJ7+d3ZG3jQkOrO1Km22dw7W
JMy2vz9biBnpphAMRYSu1g5eUNd1HVkx4W33QlEtvcotjR9XdO3AE5ktsMtjAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQU1fOrovS7/ZkJ1FPTmcFHPR6QzcowHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDAyMzQzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAM/Fu
AwQAvN1uAwQAvN2YAwQAvN39MA0GCSqGSIb3DQEBCwUAA4IBAQCE/yd5rVm/iDVr
adY5vHYl37fWsymacsBApppfAix0Pb406yfozuXqZrYNaguJOmZNQvDfvXXoSDoI
a6n5IW4TSoIrI/NPfxNNBbMjMVeZc+lR8E3mrmiCVXSX3afsQF2nyQD1EQJQSpIN
WMSTilkVaaxlWkFYRzcMwTLCESmO3iruy3Vohc8nIwHmWFFnBbzZtX1tsocVhqOW
ed+QQIpxCht8p8d4pT2q2JopQf1iLMVMjVdnj5Citf2P266y2XCGqQQUkyEaEDeS
fZs2XeivR09NIKlwGg6RPiSdUerZ+Olk75sA/B01op31V1ID4HzGywRfJHUkipE9
lG7R/7WQ
-----END CERTIFICATE-----
Generated at Sat Jun 20 03:08:14 2026 by rpki-client